Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

MURKY PANDA: A Trusted-Relationship Threat in the Cloud

Since 2023, CrowdStrike Services and CrowdStrike Counter Adversary Operations have investigated multiple intrusions conducted by MURKY PANDA, a sophisticated adversary leveraging advanced tradecraft to compromise high-profile targets. MURKY PANDA, active since at least 2023, is a cloud-conscious adversary with a broad targeting scope; the adversary’s operations have particularly focused on government, technology, academia, legal, and professional services entities in North America.

Falcon Platform Prevents COOKIE SPIDER's SHAMOS Delivery on macOS

Between June and August 2025, the CrowdStrike Falcon platform successfully blocked a sophisticated malware campaign that attempted to compromise over 300 customer environments. The campaign deployed SHAMOS, a variant of Atomic macOS Stealer (AMOS) developed by the cybercriminal group COOKIE SPIDER. Operating as malware-as-a-service, COOKIE SPIDER rents this information stealer to cybercriminals who deploy it to harvest sensitive information and cryptocurrency assets from victims.

Defending Against SCATTERED SPIDER with Falcon Next-Gen SIEM

SCATTERED SPIDER is a prolific eCrime adversary that has conducted a range of financially motivated activities beginning in early 2022. Since surfacing, this adversary continues to compromise organizations around the world, deploying ransomware and exfiltrating sensitive files.

Falcon Next-Gen Identity Security Unifies Protection Across All Identities and Domains

CrowdStrike is excited to announce CrowdStrike Falcon Next-Gen Identity Security, a new solution built to protect every identity — human, non-human, and AI agent — across on-premises, cloud, and SaaS environments. This new offering addresses the growing need for comprehensive protection throughout the full identity lifecycle.

CrowdStrike Named the Only Leader in GigaOm Radar for SaaS Security Posture Management

CrowdStrike is excited to be the only vendor named a Leader and Outperformer in the 2025 GigaOm Radar Report for SaaS Security Posture Management (SSPM). The report recognizes CrowdStrike as the most innovative and complete Platform Play, demonstrating our leadership in protecting identities and SaaS environments as the enterprise attack surface evolves.

CrowdStrike's Approach to Better Machine Learning Evaluation Using Strategic Data Splitting

Since day one, CrowdStrike's mission has been to stop breaches. Our pioneering AI-native approach quickly set our platform apart from the landscape of legacy cybersecurity vendors that were heavily reliant on reactive, signature-based approaches for threat detection and response. Our use of patented models across the CrowdStrike Falcon sensor and in the cloud enables us to quickly and proactively detect threats — even unknown or zero-day threats.

CrowdStrike Launches New AI Security Services to Strengthen AI Security and SOC Readiness

AI is transforming business processes and the threat landscape. CrowdStrike is expanding our AI Security Services portfolio to help organizations meet the dual challenges of securing their AI systems and effectively integrating AI into security operations.

CrowdStrike Signal Transforms AI-Powered Threat Detection

Security teams don't need more alerts. They need the ability to detect what others miss. That's why we're excited to announce the general availability of CrowdStrike Signal, a new class of AI-powered detection that surfaces the stealthy threats others often overlook — before they escalate. CrowdStrike Signal represents a fundamental shift in how organizations detect and respond to modern threats.

CrowdStrike Announces Integration with ChatGPT Enterprise Compliance API

CrowdStrike is announcing a native integration between CrowdStrike Falcon Shield SaaS security and the OpenAI ChatGPT Enterprise Compliance API, adding visibility and security posture capabilities for mutual customers’ ChatGPT Enterprise environments. This integration helps security teams inventory and monitor AI agents across their organization — including who created them, what they access, and how they’re shared — so teams can consistently apply existing security controls.

CrowdStrike Tailors Adversary Intelligence to Customer Environments

A new release of CrowdStrike Falcon Adversary Intelligence delivers automatically prioritized threat intelligence tailored to each unique customer environment. By surfacing the right intelligence at the right time, this update enhances SOC workflows by enabling faster triage, deeper investigations, and more confident response. Today’s organizations understand threat intelligence is critical to stay ahead of adversaries, but many struggle to determine which threats matter most and how to act on them.